Unknown · Insights-Client · CVE-2023-3972
**Name of the Vulnerable Software and Affected Versions**
insights-client (affected versions not specified)
**Description**
A security issue occurs due to insecure file operations or unsafe handling of temporary files and directories, leading to local privilege escalation. An unprivileged local user or attacker could create the /var/tmp/insights-client directory with read, write, and execute permissions before the insights-client is registered by root. After registration, an attacker could control the directory content by putting malicious scripts into it and executing arbitrary code as root, bypassing SELinux protections.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.